CVE-2022-28376

Verizon 5G Home LVSKIHP outside devices through 2022-02-15 allow anyone (knowing the device's serial number) to access a CPE admin website, e.g., at the…

published April 3, 2022

CVSS
—
EPSS
1%
Percentile
68.8
In the wild
Unconfirmed
What it is

Verizon 5G Home LVSKIHP outside devices through 2022-02-15 allow anyone (knowing the device's serial number) to access a CPE admin website, e.g., at the 10.0.0.1 IP address. The password (for the verizon username) is calculated by concatenating the serial number and the model (i.e., the LVSKIHP string), running the sha256sum program, and extracting the first seven characters concatenated with the last seven characters of that SHA-256 value.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01233 · 68.8th percentile
Published
2022-04-03T03:27Z
EPSS history
Timeline
  • 03 APR 03:27Z
    Verizon 5G Home LVSKIHP outside devices through 2022-02-15 allow anyone (knowing the device's serial number) to access a CPE admin website, e.g., at the…
    cvelistv5